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IP VENDOR SENDS AUTHORIZATION CODE TO A USER TO USE A 
PARTICULAR DEVELOPMENT SYSTEM TO IMPLEMENT A PARTICULAR IP 
MODULE ON AN FPGA THAT HAS A PARTICULAR UDI 



LICENSE MANAGER QUERIES USER FOR AUTHORIZATION CODE 
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USER SUPPLIES AUTHORIZATION CODE TO LICENSE MANAGER 
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LICENSE MANAGER READS UDI FROM FPGA AND SERIAL NUMBER 
FROM DEVELOPMENT SYSTEM 
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LICENSE MANAGER VERIFIES THAT AUTHORIZATION CODE GRANTS 
ACCESS TO THE IP MODULE BY: 1) CHECKING THAT THE UDI READ 
FROM THE FPGA MATCHES THE UDI FROM THE AUTHORIZATION CODE; 
2) CHECKING THAT THE SERIAL NUMBER OF THE USER'S 
DEVELOPMENT SYSTEM MATCHES THE SERIAL NUMBER FROM THE 
AUTHORIZATION CODE; AND 3) CHECKING THAT THE USAGE 
CONDITION IN THE UDI IS MET 
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IF THE VERIFICATION IS MADE, THEN THE LICENSE MANAGER: 1) 
ALLOWS THE USER'S DEVELOPMENT SYSTEM TO ACCESS TO THE IP 
MODULE; AND 2) ENCRYPTS A KEY FOR THE IP MODULE USING THE UDI 
AND A PRIVATE KEY, AND SENDS THE ENCRYPTED KEY AND KEY 

NUMBER TO THE FPGA 
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FPGA USES ITS UDI ALONG WITH THE PRIVATE KEY TO DECRYPT THE 
ENCRYPTED KEY AND KEY NUMBER, FPGA STORES THE KEY IN 
ASSOCIATION WITH THE KEY NUMBER 
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WHEN USER HAS DESIGNED USER-SPECIFIC CIRCUIT EMPLOYING THE 
IP MODULE, THE DESIGN TOOL OUTPUTS A BIT STREAM FOR THE 
USER-SPECIFIC DESIGN, BEFORE THE PORTION OF THE BIT STREAM 

CORRESPONDING TO THE IP MODULE THE LICENSE MANAGER 
INSERTS THE KEY NUMBER FOR THE IP MODULE KEY, THE LICENSE 
MANAGER ENCRYPTS THE PORTION OF THE BIT STREAM 
CORRESPONDING TO THE IP MODULE USING THE KEY 
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BIT STREAM WITH THE KEY NUMBER AND ENCRYPTED PORTION SENT 

TO FPGA 
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FPGA RETRIEVES KEY NUMBER FROM THE BIT STREAM AND USES THE 
KEY NUMBER TO RETRIEVE THE KEY FOR THE IP MODULE, FPGA THEN 
USES THE RETRIEVED KEY TO DECRYPT THE PORTION OF THE BIT 
STREAM CORRESPONDING TO THE IP MODULE, THE RESULTING BIT 
STREAM IS THEN USED TO CONFIGURE THE FPGA TO REALIZE THE 

USER-SPECIFIC CIRCUIT 
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IP VENDOR SENDS AUTHORIZATION CODE TO A USER TO USE A 
PARTICULAR DEVELOPMENT SYSTEM TO IMPLEMENT A 
PARTICULAR IP MODULE ON AN FPGA THAT HAS A PARTICULAR UDI 
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LICENSE MANAGER QUERIES USER FOR AUTHORIZATION CODE 
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USER SUPPLIES AUTHORIZATION CODE TO LICENSE MANAGER 
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LICENSE MANAGER READS UDI FROM FPGA AND SERIAL NUMBER 
FROM USER'S DEVELOPMENT SYSTEM 
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LICENSE MANAGER VERIFIES THAT AUTHORIZATION CODE GRANTS 
ACCESS TO THE IP MODULE ON THE FPGA AND USING THE USER'S 

DEVELOPMENT SYSTEM 
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IF THE VERIFICATION IS MADE, THEN THE LICENSE MANAGER 
ALLOWS THE DESIGN TOOL ACCESS TO THE IP MODULE 
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WHEN USER HAS DESIGNED USER-SPECIFIC CIRCUIT EMPLOYING 
THE IP MODULE, THE DESIGN TOOL OUTPUTS A BIT STREAM FOR 
THE USER-SPECIFIC DESIGN, THE LICENSE MANAGER ENCRYPTS 
THE BIT STREAM USING A UDI-DEPENDENT KEY AND A PRIVATE KEY 
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FPGA USES THE UDI-DEPENDENT KEY AND THE PRIVATE KEY TO 
DECRYPT THE BIT STREAM, THE RESULTING BIT STREAM IS THEN 
USED TO CONFIGURE THE FPGA TO REALIZE THE USER-SPECIFIC 

CIRCUIT 
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